teloiuco[.]sbs

This domain, teloiuco.sbs, is confirmed to host a phishing portal specifically designed to mimic legitimate telecommunication service login pages. Infrastructure analysis reveals the site is engineered to harvest user credentials, payment details, and personal identification information through fraudulent login interfaces that closely resemble authentic telecom provider portals. The phishing kit deployed on this domain includes form submission handlers that exfiltrate captured data to remote command-and-control servers, with particular targeting observed against mobile users and corporate telecom accounts. Evidence supporting the malicious classification includes the domain's recent registration on June 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Despite its active phishing operations, the domain currently shows 0/95 detections on VirusTotal, indicating either the use of evasion techniques or delayed detection by security engines. The hosting IP address, 27.124.47.186, has no prior blocklist history but resolves to a network segment known for hosting transient phishing infrastructure. No legitimate services or historical DNS records are associated with this domain, further corroborating its fraudulent nature. Users who have visited teloiuco.sbs or entered credentials on the site should immediately revoke and reset all passwords associated with telecom accounts, particularly those used for billing or account management. Enable multi-factor authentication on all critical services to mitigate account takeover risks. Monitor financial statements for unauthorized transactions, as harvested credentials may be used for both account hijacking and fraudulent purchases. Security teams should add the domain and associated IP address to internal blocklists and investigate any network connections to 27.124.47.186 within enterprise environments. Given the domain's recent creation and lack of detection coverage, heightened vigilance is recommended for any communications directing users to this or similarly structured domains.